Guidelines for Using the Modify DN Operation With Replication

Using the modify DN operation without complying with the following requirements can break replication and bring down your directory service.

• Ensure that all servers in your replication topology are running Directory Server 5.2 2005Q1 or later. You cannot use the modify DN operation on versions of Directory Server prior to Directory Server 5.2 2005Q1.

• Enable the modify DN operation on all servers in your replication topology. If the modify DN operation is supported on the master server but not on the consumer server, replication will fail. A message similar to the following will be written to the error log on the supplier server:

  Unable to start a replication session with MODDN enabled

  To restart replication, reconfigure the replication topology to enable the modify DN operation on all servers. and then start a replication session in one of the following ways:

  • By following the instructions in To Force Replication Updates.

  • By changing an entry on the supplier server. The change is replicated to the consumer servers.

• Enable and configure the referential integrity plug-in on all master replicas in the topology. This action ensures that the server maintains referential integrity for groups and roles. For information about how to enable and configure the referential integrity plug-in, see To Configure the Referential Integrity Plug-In.

  After performing a modify DN operation, allow time for the referential integrity plug-in to replicate its changes.